CVE-2020-0236: 
NixOS vulnerability analysis and mitigation

A vulnerability was discovered in Android 10's A2DP_GetCodecType functionality within the a2dp_codec_config component. The vulnerability was assigned CVE-2020-0236 and was disclosed on January 26, 2021 (CISA Bulletin).

The vulnerability stems from improper input validation in the A2DP_GetCodecType function of a2dp_codec_config, which can lead to an out-of-bounds read condition. The vulnerability has been assigned a CVSS score of 5.0, indicating medium severity (CISA Bulletin).

This vulnerability could lead to remote information disclosure without requiring additional execution privileges. The impact is limited to potential exposure of sensitive information through the out-of-bounds read condition (CISA Bulletin).

The vulnerability can be exploited remotely and does not require user interaction for exploitation. The attack complexity is considered moderate given the nature of the vulnerability (CISA Bulletin).

The vulnerability affects Android 10 devices. Users should ensure their devices are updated with the latest security patches provided by Google (CISA Bulletin).